Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3017▼ 66 respecto a la semana anterior

Críticas / altas1412▲ 56 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)381▼ 129 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-34464	Modificada	Media (5.3)	0.44%	—	Siemens Sicam Gridedge Essential ARM Siemens Sicam Gridedge Essential GDS ARM Siemens Sicam Gridedge Essential GDS Intel Siemens Sicam Gridedge Essential Intel	12/7/2022	17/6/2026	A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.7.3). The affected application uses an improperly protected file to import SSH keys. This could allow attackers with access to the filesystem of the host on which SICAM GridEdge runs to inject a custom SSH key to that file.
CVE-2022-30231	Modificada	Media (6.9)	0.61%	—	Siemens Sicam Gridedge Essential	14/6/2022	17/6/2026	A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user's password hash.
CVE-2022-30230	Modificada	Crítica (9.3)	1.1%	—	Siemens Sicam Gridedge Essential	14/6/2022	17/6/2026	A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions.
CVE-2022-30229	Modificada	Alta (8.6)	0.75%	—	Siemens Sicam Gridedge Essential	14/6/2022	17/6/2026	A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of a user, such as credentials, in case that user's id is known.
CVE-2022-30228	Modificada	Alta (8.6)	0.40%	—	Siemens Sicam Gridedge Essential	14/6/2022	17/6/2026	A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed.